Attachment 597415 Details for Bug 837944 – sa-update with audit

sa-update with audit

sa-update-audit.txt (text/plain), 5.84 KB, created by Scott Shambarger on 2012-07-10 19:04:09 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Scott Shambarger

Created: 2012-07-10 19:04:09 UTC

Size: 5.84 KB

patch

obsolete

>----
>time->Tue Jul 10 11:35:02 2012
>type=PATH msg=audit(1341945302.260:51314): item=0 name="/etc/mail/spamassassin/sa-update-keys/secring.gpg" inode=2097986 dev=fd:00 mode=0100600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_mail_t:s0
>type=CWD msg=audit(1341945302.260:51314):  cwd="/root"
>type=SYSCALL msg=audit(1341945302.260:51314): arch=c000003e syscall=2 success=yes exit=3 a0=7fd1187ff0a0 a1=0 a2=1b6 a3=238 items=1 ppid=9771 pid=9772 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=152 comm="gpg" exe="/usr/bin/gpg" subj=system_u:system_r:gpg_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1341945302.260:51314): avc:  denied  { read } for  pid=9772 comm="gpg" name="secring.gpg" dev="dm-0" ino=2097986 scontext=system_u:system_r:gpg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_mail_t:s0 tclass=file
>----
>time->Tue Jul 10 11:35:02 2012
>type=PATH msg=audit(1341945302.260:51315): item=0 name="/etc/mail/spamassassin/sa-update-keys/pubring.gpg" inode=2098175 dev=fd:00 mode=0100600 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:etc_mail_t:s0
>type=CWD msg=audit(1341945302.260:51315):  cwd="/root"
>type=SYSCALL msg=audit(1341945302.260:51315): arch=c000003e syscall=2 success=yes exit=3 a0=7fd1187ff0a0 a1=0 a2=1b6 a3=238 items=1 ppid=9771 pid=9772 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=152 comm="gpg" exe="/usr/bin/gpg" subj=system_u:system_r:gpg_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1341945302.260:51315): avc:  denied  { read } for  pid=9772 comm="gpg" name="pubring.gpg" dev="dm-0" ino=2098175 scontext=system_u:system_r:gpg_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:etc_mail_t:s0 tclass=file
>----
>time->Tue Jul 10 11:35:06 2012
>type=PATH msg=audit(1341945306.206:51317): item=2 name="/etc/mail/spamassassin/sa-update-keys/.#lk0x7f5a63f52ed0.shambarger.net.9779x" inode=2099169 dev=fd:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_mail_t:s0
>type=PATH msg=audit(1341945306.206:51317): item=1 name="/etc/mail/spamassassin/sa-update-keys/" inode=2097578 dev=fd:00 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_mail_t:s0
>type=PATH msg=audit(1341945306.206:51317): item=0 name="/etc/mail/spamassassin/sa-update-keys/.#lk0x7f5a63f52ed0.shambarger.net.9779" inode=2099169 dev=fd:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_mail_t:s0
>type=CWD msg=audit(1341945306.206:51317):  cwd="/root"
>type=SYSCALL msg=audit(1341945306.206:51317): arch=c000003e syscall=86 success=yes exit=0 a0=7f5a63f52f80 a1=7f5a63f4de00 a2=7f5a618df93e a3=4e items=3 ppid=9778 pid=9779 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=152 comm="gpg" exe="/usr/bin/gpg" subj=system_u:system_r:gpg_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1341945306.206:51317): avc:  denied  { link } for  pid=9779 comm="gpg" name=".#lk0x7f5a63f52ed0.shambarger.net.9779" dev="dm-0" ino=2099169 scontext=system_u:system_r:gpg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_mail_t:s0 tclass=file
>----
>time->Tue Jul 10 11:35:06 2012
>type=PATH msg=audit(1341945306.206:51318): item=1 name="/etc/mail/spamassassin/sa-update-keys/.#lk0x7f5a63f52ed0.shambarger.net.9779x" inode=2099169 dev=fd:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_mail_t:s0
>type=PATH msg=audit(1341945306.206:51318): item=0 name="/etc/mail/spamassassin/sa-update-keys/" inode=2097578 dev=fd:00 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_mail_t:s0
>type=CWD msg=audit(1341945306.206:51318):  cwd="/root"
>type=SYSCALL msg=audit(1341945306.206:51318): arch=c000003e syscall=87 success=yes exit=0 a0=7f5a63f4de00 a1=7fffddcf2510 a2=1 a3=4e items=2 ppid=9778 pid=9779 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=152 comm="gpg" exe="/usr/bin/gpg" subj=system_u:system_r:gpg_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1341945306.206:51318): avc:  denied  { unlink } for  pid=9779 comm="gpg" name=".#lk0x7f5a63f52ed0.shambarger.net.9779x" dev="dm-0" ino=2099169 scontext=system_u:system_r:gpg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_mail_t:s0 tclass=file
>type=AVC msg=audit(1341945306.206:51318): avc:  denied  { remove_name } for  pid=9779 comm="gpg" name=".#lk0x7f5a63f52ed0.shambarger.net.9779x" dev="dm-0" ino=2099169 scontext=system_u:system_r:gpg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_mail_t:s0 tclass=dir
>----
>time->Tue Jul 10 11:35:06 2012
>type=PATH msg=audit(1341945306.206:51316): item=1 name="/etc/mail/spamassassin/sa-update-keys/.#lk0x7f5a63f52ed0.shambarger.net.9779" inode=2099169 dev=fd:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_mail_t:s0
>type=PATH msg=audit(1341945306.206:51316): item=0 name="/etc/mail/spamassassin/sa-update-keys/" inode=2097578 dev=fd:00 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_mail_t:s0
>type=CWD msg=audit(1341945306.206:51316):  cwd="/root"
>type=SYSCALL msg=audit(1341945306.206:51316): arch=c000003e syscall=2 success=yes exit=7 a0=7f5a63f52f80 a1=c1 a2=1a4 a3=7f5a62adef23 items=2 ppid=9778 pid=9779 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=152 comm="gpg" exe="/usr/bin/gpg" subj=system_u:system_r:gpg_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1341945306.206:51316): avc:  denied  { create } for  pid=9779 comm="gpg" name=".#lk0x7f5a63f52ed0.shambarger.net.9779" scontext=system_u:system_r:gpg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_mail_t:s0 tclass=file
>type=AVC msg=audit(1341945306.206:51316): avc:  denied  { add_name } for  pid=9779 comm="gpg" name=".#lk0x7f5a63f52ed0.shambarger.net.9779" scontext=system_u:system_r:gpg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_mail_t:s0 tclass=dir
>type=AVC msg=audit(1341945306.206:51316): avc:  denied  { write } for  pid=9779 comm="gpg" name="sa-update-keys" dev="dm-0" ino=2097578 scontext=system_u:system_r:gpg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_mail_t:s0 tclass=dir

Actions: View

Attachments on bug 837944: 597415